Reconciliation Account Auditing Generates Large Amount of UPA Snapshots

(Doc ID 2411346.1)

Last updated on JUNE 17, 2018

Applies to:

Identity Manager - Version 11.1.2.3.180111 and later
Information in this document applies to any platform.

Symptoms

When we do the Reconciliation Account Auditing, we do the snapshot / audit per each operation of the account/entitlements.

For example, a user has been provisioned to the ADUser account with 100+ groups. When the target has the groups OU changes, during the account reconciliation, there will be 100+ snapshots taken and inserted into the UPA table.

In production, the user may have been provisioned to many accounts with thousands of groups, each snapshot of the user will have a large amount of data, such as 1MB, and saved in the physical storage. If 100+ snapshots taken in one recon event (account reconciliation for this single user will be one recon event), the UPA table size will be growing dramatically fast, and the archive will not work as in realistic consideration.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms